Discussion

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Started by The Hacker News · 20 Aug 2026 17:18 · 5 Views · 0 Replies
Thread Starter #0
Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment.

The vulnerability ("GHSA-864f-rcv7-6rh4"), which has yet to be assigned a CVE identifier, impacts all versions of the library before and including 7.0.0.

Okumaya devam et...

You must be logged in to reply.

0 quotes selected